local-skill-manager

• Analyzed: May 14, 2026, 7:59 AM
• Findings: 1
• Version: 1.0.1
• Hash: 7c68fba379695eddc1fa4139dc1df07f26e5a54b236d6f967afb1076ca5dc33c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'local-skill-manager' bundle is a utility for managing local skill directories. It includes scripts for listing, version checking, creating, and deleting skills (scripts/list_skills.py, scripts/create_skill.py, scripts/delete_skill.py). The deletion logic in delete_skill.py includes robust security measures, such as regex-based name validation, a protected skills list, and explicit path-traversal guards using canonicalized paths to ensure operations remain within the designated skills directory. No indicators of data exfiltration, malicious execution, or prompt injection were found.